I have created a policy on stage with name 'Partner Policy - Employee only Access'. I have tested it by creating a test partner 'emponly' there. I found it is not working as expected. Below are some of my observations,
1. Configure change approval page - save and preview button not checking user access rights:
For a user with view only rights, it do not allow to save changes on clicking on save button, but it saves the same changes if I click on save & preview button.
2. in some cases like landing page, if I edit any message on landing page, it shows message that it is saved, though the changes are not saved actually, and it wipes out enrollment mode on saving
3.Configure employee pop up: Gives message that user has view only rights but actually saves the changes.
4.admin users: I can update admin users data
5.site branding and theme: message is given but data is saved
6.Company information: I can do changes to all of the tabs
7.View history is already view only page, Document type and other lists are disabled for me, because of view only rights. I can not view any data using view history
8. I can add, edit rates and plans.

Hi Vijay,

Dave want's to revoke all access from every one on production, to do any changes except to the employee data. I have created a user access policy on stage, but it seems not working as expected. Please have this created on production and get it tested. They needs this to be done ASAP.

Hi Samir

as discussed assigning this ticket to you for removing access as per Dave's comments in email.

"The only people that should have SA access and customizer access on production is Amannda, Jen L, Debbie Kulling, Ashely, Amit, Chris Ellenberger, and Cindy Wibbing . Everyone else should have it removed."

Regards
Vijay
CC: Umesh Kanade,Rakesh Roy,Satya,Jaideep Vinchurkar